It Ethan that networks don't have any authentication by default to access the network.
All you need to do is plug your ethernet cable into a switch and you will gain access to the network
with no authentication no authorization and no accounting triple-A or authentication authorization.
Accounting is a way to centralize policies that are applied to network devices.
As an example you could centralize the authentic cation of users by using a triple A server such as
Cisco secure.
Yes the authentication means that you are authenticating a user name and password before a user can
access the network or a device on the network.
Authorization determines what youre allowed to do once you have been authenticated.
So are you as an example allowed to go to privilege mode or enable mode on a router.
Are you allowed to access a server on the network.
Accounting is a log of what's happened on the network.
So as an example you could log user's attempts to access a network device via telnet or S-sh in a moment
all demonstrate.
Triple A using a genius three network where I have a Cisco ACX server connected.
The server is running within VM Ware but is connected via a genius three switch to multiple network
devices.
I'll configure the network to use local authentication and then we'll centralize the authentication
so that Loggins authorized from a central A C a server rather than having a local username and password
database on each network device.
Not to stop anyone just accessing your network.
You can implement identity based theni cation or identity based networks by using a protocol called
Ada 12:58 x.
The trouble 11:52 one X stented allows you to implement identity based networking where a client machine
has to present a user name and password before they can gain access to the network.
In Ada to the 1x you have three components or three roles.
The client also known as the supplicant is a PC such as a Windows PC running Ada to add 1 x compliant
client software and a theni Keda doesn't just vindicate the client but Saens authentication information
through to and or any cations server the authentic data would be something like an Ethernet switch which
is controlling access to the network the client PC is connected to a port on the switch acting as the
authenticator and no frame's from the client are permitted except 8:0 to that one x frames before if
any cation takes place.
So when the client sends traffic to the switch acting as the syndicator it will send an ADA to to add
one X challenge to the client asking for a theni cation information a user name and password is sent
to the switch but the switch doesn't read that information but passes it on to the authentication server
which could be a radius or task X server radius and Takacs or the protocols used between the authenticator
and a theni cations server.
The authentication server validates the credentials of the client.
In other words it makes sure that the client username and password are correct and that the client is
allowed to access the network.
If the username and password all correct the any cations server sends a message to the authenticator
or switch which then permits the client access to the network.
The authenticator sends a successful authentication message to the client and now when the client forbids
traffic such as HTP or telnet traffic that is permitted onto the network.
The important thing with 1:52 that one ex is that the client cannot access the network until authentication
has succeeded based on the information stored in the offene cations server and authentication server
could use a local database.
Or it could use a centralized directory such as active directory for the storing of usernames and passwords.